Privacy policy

Privacy Policy

Last updated: May 18, 2026

This Privacy Policy explains how Ashgray LLC, a Connecticut limited liability company doing business as Basin Craft ("we," "us," or "our"), collects, uses, shares, and protects information about you when you visit our website, place an order, or otherwise interact with us. Our online store is hosted by Shopify Inc. Order fulfillment is performed in cooperation with our handcraft atelier in Türkiye.

By using our website, you agree to the practices described in this policy.

1. Data Controller

The data controller responsible for your personal information is:

Ashgray LLC (d/b/a Basin Craft)
1053 Farmington Avenue, 1st Floor / 2nd Floor
Farmington, CT 06032, United States
Email: help@basincraft.com

2. Information We Collect

Information you provide directly:

Order information — name, billing and shipping addresses, email, phone number, and the items you purchase
Account information — if you create an account, your email and any other details you choose to add
Communications — when you contact us by email, including the content of your messages
Newsletter / marketing signups — email address and any preferences

Information collected automatically:

Device and browsing data — IP address, browser type, operating system, referring URLs, pages viewed, time spent, and click activity
Cookies and similar technologies — see Section 5 below

Payment information:

Payment details (credit card numbers, etc.) are entered directly with our payment processors. Ashgray LLC does not store full payment card numbers on its servers.

3. How We Use Your Information

We use your information to:

Process, fulfill, ship, and deliver your orders
Communicate with you about your order, shipping, and customer service inquiries
Send marketing emails and newsletters (only if you opt in, and you can unsubscribe at any time)
Improve our website, products, and customer experience
Detect and prevent fraud, abuse, and security incidents
Comply with our legal obligations

4. How We Share Your Information

Ashgray LLC does not sell your personal information. We share information only with the following categories of recipients, and only as needed to operate our business:

Shopify Inc. — our e-commerce platform, which hosts our store and processes orders
Payment processors — such as Shopify Payments, Stripe, PayPal, or similar, to process your payment securely
Our atelier in Türkiye — to manufacture and prepare your order for shipment, we share necessary fulfillment data (your name, shipping address, phone number, and the items ordered). We do not share payment card numbers with the atelier.
Shipping and logistics partners — international freight forwarders, last-mile carriers, white-glove delivery providers, and customs brokers responsible for delivering your order from Türkiye to your U.S. address
Email and marketing service providers — such as Klaviyo, to send transactional and (with your consent) marketing emails
Analytics and advertising providers — such as Google Analytics, Meta (Facebook), and similar services, to understand site usage and reach potential customers
Professional advisors — accountants, lawyers, and consultants who help us run our business
Authorities — when required by law, court order, or to protect our legal rights

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the site, remember your cart and preferences, analyze traffic, and (with your consent) deliver relevant advertising. Cookies fall into these categories:

Essential cookies — required for the site to function (cart, checkout, login)
Analytics cookies — help us understand how visitors use the site
Marketing cookies — used to show you relevant ads on other platforms

You can control cookies through your browser settings or, where applicable, through the cookie consent banner on our site. Disabling certain cookies may affect site functionality.

6. International Data Transfers

Ashgray LLC is based in the United States and processes most personal information within the United States and Canada (where Shopify is headquartered). To fulfill your order, we transfer limited fulfillment data — specifically your name, shipping address, phone number, and order contents — to our handcraft atelier in Türkiye, which produces and prepares your purchase for shipment.

If you reside in the European Union, United Kingdom, or another jurisdiction with cross-border data transfer rules, your personal information may be transferred to countries (including the United States and Türkiye) that may have data protection frameworks different from your home country. We take reasonable measures — including contractual safeguards with our service providers — to protect your information in accordance with this policy.

7. Data Retention

We retain your personal information only as long as needed to:

Fulfill the purposes described in this policy
Comply with our legal, accounting, and tax obligations under U.S. and Connecticut law
Resolve disputes and enforce our agreements

Order records are typically retained for at least 7 years to meet U.S. tax and accounting requirements. Marketing data is retained until you unsubscribe or request deletion.

8. Your Rights

For all customers, you may contact us at help@basincraft.com to:

Access the personal information we hold about you
Correct inaccurate information
Request deletion of your information (subject to legal retention requirements)
Unsubscribe from marketing emails (you can also click "unsubscribe" at the bottom of any marketing email)

For California residents (CCPA / CPRA): You have the right to know what personal information we collect, to request deletion, to correct inaccurate information, to opt out of the "sale" or "sharing" of personal information (Ashgray LLC does not sell personal information), and to not be discriminated against for exercising these rights.

For Connecticut residents (CTDPA) and residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Utah, Texas, Oregon, and Montana): You may have similar rights to access, correct, delete, and obtain a portable copy of your personal information, as well as to opt out of targeted advertising and certain profiling activities. To exercise any of these rights, email help@basincraft.com. We will verify your identity before fulfilling your request.

For EU / UK / EEA residents (GDPR / UK GDPR): You also have the right to data portability, to restrict or object to certain processing, and to lodge a complaint with your local data protection authority. The legal bases on which we rely are: performance of a contract (to fulfill your order), legitimate interests (to operate and improve our business), consent (for marketing), and legal obligations.

9. Children's Privacy

Our website and products are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Security

We use industry-standard security measures, including encryption in transit (HTTPS / TLS) and access controls, to protect your information. However, no method of transmission or storage over the internet is 100% secure. While we work hard to protect your information, we cannot guarantee its absolute security.

11. Third-Party Links

Our site may contain links to third-party websites (for example, our social media pages). We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.